Traceable provider evidence
We use Google Cloud/Firebase and the OpenAI API. The Trust Center identifies the verified original ISO documents, their publishers and their specific scope.
Your thoughts.
In safe hands.
Personal topics need trust. Learn how Alera handles your conversations, your data and your control over them.
ISO 27001Google Cloud / Firebase · named enterprise servicesISO 27017Google Cloud / Firebase · cloud security controlsISO 27018Google Cloud / Firebase · personal data protectionISO 27701Google Cloud / Firebase · privacy management
ISO 42001Google Cloud · selected AI servicesISO 27001 / 27701OpenAI · combined certificate including the API
BSI C5 Type 2Google Cloud · infrastructure evidenceSOC 3OpenAI · original report at the provider
GDPRHandling personal data responsibly
Storage in GermanyCentral data storage in Frankfurt am MainEncrypted dataProtected in transit and at rest
No Alera model trainingYour chat content does not train Alera models
Trust needs a reliable foundation.
Clear standards, protected infrastructure and identifiable responsibilities belong together.
Clearly identified cloud and AI services
Google’s ISO 27001, 27017, 27018 and 27701 evidence includes named Firebase services. BSI C5 covers Google Cloud infrastructure; Google’s ISO 42001 covers selected AI services. OpenAI’s combined ISO certificate explicitly includes the API.
Personal conversations stay private
Schools and parents cannot access personal chats. The service providers we use process the data required to deliver the app functions you choose.
Making data processing understandable
We distinguish between central storage, AI processing and user control, so you can understand what each service does.
Trust starts with an open conversation.
Schools need clear information and a personal contact. Finn supports the introduction of Alera and is available for questions about using it at school.
Finn BorchersSchool partnerships
Get in touchYour data. Understandable and under your control.
Where data is stored, why it is processed and how you can delete it are different questions. Here is how they connect.
Central storage in Germany
Alera’s central data storage is in Frankfurt am Main. Individual service providers may also process data outside the EU, including OpenAI in the USA to generate AI responses.
Your chats are not training material
We do not use your chat content to train our own models, and we do not enable training with OpenAI API data. Processing a request to provide a response is a separate activity.
You choose what to share
You decide what to bring into a conversation. When you delete your account in the app, linked chat and profile data is deleted unless legal retention requirements apply.
Technology with clear responsibility.
Kai leads Alera’s technical development and AI work. This means combining helpful features with careful handling of personal data.
Kai KöllemannTechnical leadership & AI development
Meet our teamGet to know Alera at your own pace.
Start for yourself, or talk to us about introducing Alera at your school.
FAQ
Answers about data security and the handling of personal conversations.
Who can see my conversations?
Your conversations are not public. Schools and parents cannot access personal chats. The service providers we use process the data required for the app to respond and provide its functions. You do not need to use your real name for basic app use.
Where is my data stored and processed?
Alera’s central data storage is in Frankfurt am Main. Storage and processing are different activities: some functions use additional service providers, including OpenAI with processing in the USA. Details about these services and international transfers are available in the Privacy Policy under Legal in the footer.
Are my conversations used to train AI models?
We do not use your chat content to train our own models, and we do not enable training with OpenAI API data. Separately, OpenAI may retain inputs, responses and related metadata in abuse-monitoring logs for up to 30 days, subject to the exceptions described in the Privacy Policy.
How does voice mode work?
Dictation uses speech recognition on your device. Alera therefore does not receive or store the audio used for dictation. Audio files you deliberately upload are processed separately. Dictation and audio uploads are two different functions.
Can I delete my account and data?
You can delete your account in the app. We then delete the linked data, including chat history and profile data, unless legal retention requirements apply. Payment records and individual service providers are subject to the retention rules explained in the Privacy Policy.
What information does my school receive?
The school receives aggregate usage data only. Personal chats and individual conversation histories are not accessible to the school or to parents. Using Alera is voluntary and at your own pace.
What does the BSI C5 evidence cover?
The C5 Type 2 evidence covers the cloud infrastructure provided by Google Cloud and its assessment against the BSI criteria catalogue. The Trust Center identifies the provider, specific scope and access to the original report.
Have more questions?
We are happy to explain how Alera is used and how we handle personal data. Get in touch directly.